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REMARKS/ARGUMENTS 

Claims 1, 3-22 are pending in this application. Claims 1, 13 and 14 are independent. 
Claims 1, 4, 13-14, 16-18, and 21-22 are amended. 

CLAIM REJECTIONS 

In sections 4-25 on pages 2-10, the Office Action rejects claims 1, 3-8, and 10-22 under 
35 U.S.C. § 103(a) as allegedly unpatentable over U.S. Patent No. 6,978,223 to Millken 
(hereinafter "Milliken") in view of Published U.S. Patent Application No. 2002/0042837 to 
Ebata et al. (hereinafter "Ebata") and Published U.S. Patent Application No. 2004/0030927 to 
Zuk (hereinafter "Zuk"). In sections 26-27 on pages 10-11, the Office Action rejects claim 9 
under 35 U.S.C. § 103(a) as allegedly unpatentable over the combination of Milliken, Ebata, and 
Zuk, further in view of "Hash Based IP Traceback" by Snoeren et al. (hereinafter "Snoeren"). 

In response, Applicant amends independent claims 1, 13, and 14 to recite the following 
subject matter: "storing flow identifiers computed at said respective router interface during said 
time window" (emphasis added). The subject matter finds support in the specification, for 
example, in paragraph [0024]. All of the independent claims now recite the subject matter of 
identifying a router interface for a single malicious packet by searching for the flow identifier of 
the single malicious packet in all data structures stored at the network node that contain data for 
an arrival time window. 

The courtesies extended to Applicant's representative by Examiner Yalew at the 
interview held on June 9, 2008 are appreciated. The reasons presented at the interview as 
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warranting favorable action are incorporated into the remarks below and constitute Applicant's 

record of the interview. As discussed during that interview, independent claims 1,13, and 14 are 

patentably distinct from Milliken. Ebata, Zuk, and Snoeren fail to remedy the deficiencies of 

Milliken. 

Examiner Yalew indicated that the amended claims distinguished over Milliken because 
Milliken did not store flow identifiers computed at a respective router interface during a specific 
time window. Instead, as disclosed on lines 29-31 of col. 7, Milliken always computes a 
signature algorithm, having no restrictions related to a time window. Thus, independent claims 
1, 13, and 14 are allowable. 

Claims 3-12 and 15-22 respectively depend upon independent claims 1 and 14. 
Therefore, claims 3-12 and 15-22 are also allowable at least on the basis of their respective 
dependencies on allowable claims 1 and 14. Accordingly, Applicant respectfully requests 
withdrawal of the rejection of claims 1 and 3-22 under 35 U.S.C. § 103(a). 

CONCLUSION 

While we believe that the instant amendment places the application in condition for 
allowance, should the Examiner have any further comments or suggestions, it is respectfully 
requested that the Examiner telephone the undersigned attorney in order to expeditiously resolve 
any outstanding issues. 
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In the event that the fees submitted prove to be insufficient in connection with the filing 
of this paper, please charge our Deposit Account Number 50-0578 and please credit any excess 
fees to such Deposit Account. 



KRAMER & AMADO, P.C. 
1725 Duke Street, Suite 240 
Alexandria, VA 22314 
Phone: 703-519-9801 
Fax: 703-519-9802 



Respectfully submitted, 
Kramer & Amado, P.C. 



Date: July 10. 2008 
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